Risk Management
Performing a Vendor Risk Management Process as Part of Normal Business Operations is an Important Step in Securing the Supply Chain
Hi, what are you looking for?
SecurityWeek
Funding/M&A
The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.
Cybersecurity Funding
The funding round brings the total amount raised by the NetRise to roughly $25 million.
Malware & Threats
The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April.
Supply Chain Security
Researchers uncover new software supply chain threat from LLM-generated package hallucinations.
Cybercrime
Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers.
Application Security
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
Cybercrime
Kaspersky Lab has uncovered details on what they believe is a small yet sophisticated and determined group of attackers targeting several industrial and high...
Network Security
IT supply chain integrity issues are real, and will have mainstream enterprise IT impact within the next five years, Gartner analysts wrote in a...
Security Infrastructure
The Department of Energy (DOE), Department of Justice (DOJ), and the Department of Homeland Security (DHS) need to tighten procedures and controls when it...
Cybercrime
While it may be unrealistic to completely lock down an organization’s cyber supply chain, companies need to take a look at how products up...
Security Infrastructure
A consortium of experts has published a preview of standards meant to improve the security of the global supply chain for commercial software and...
Supply Chain Security
Student Hackers Develop New Design Techniques to Protect Against Vulnerabilities in Vital Components in the Electronics Supply Chain
Cybercrime
Do you remember those ’80s and ’90s movies that portrayed the same hacker over and over, just in a different setting? It was always...
CISO Strategy
This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business.
Management & Strategy
Vulnerabilities
Data Breaches
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Management & Strategy
Cybersecurity Funding
Cloud Security
Vulnerabilities
